---- quanah@stanford.edu wrote:

What I want to do, is put subtree based accesslog's on my replica servers. We have multiple downstream systems that pull data from the directory. This would allow them to "sit and listen" to the changes made in their subtrees of interest, using the syncrepl protocol.

Uh huh. That's what search filters are for. If that's the only motivation for this ITS, then we can close it right now.

ldapsearch -b cn=log (reqDN:dnsubtreematch:=ou=accounts,dc=stanford,dc=edu)

-- Howard Chu Chief Architect, Symas Corp. Director, Highland Sun http://www.symas.com http://highlandsun.com/hyc Symas: Premier OpenSource Development and Support